Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: tWQ4X9dNy8jrf3xwBUvQleCnQQomOYbS+amafAz0aX4=
Subject key identifier: 5C:4F:32:4C:BC:13:3F:CC:9F:3A:C7:94:EA:22:F3:D5:AA:A1:31:45
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 01976C98D7DDBA8143E0EA7DB87FB27CD679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 0D59
Signing time: Sat 14 Jun 2025 04:00:45 +0000
Manifest this update: Sat 14 Jun 2025 04:00:45 +0000
Manifest next update: Sun 15 Jun 2025 04:00:45 +0000
Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: f8c7cMICS/g0HlIjj0B0EdsU4GHilT+Lq9+wt50Xggk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:d7:dd:ba:81:43:e0:ea:7d:b8:7f:b2:7c:d6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Jun 14 04:00:45 2025 GMT
Not After : Jun 15 04:00:45 2025 GMT
Subject: CN=5c4f324cbc133fcc9f3ac794ea22f3d5aaa13145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:8e:02:4c:05:a0:70:97:db:36:98:1f:dc:
36:c6:d7:b5:be:dd:37:be:5c:79:c6:b1:4b:4e:6b:
ce:df:23:a1:a0:ef:8a:0c:f7:b0:5d:26:ed:43:da:
b0:b5:73:78:12:73:47:dc:84:84:ee:5f:3e:0d:80:
13:f1:75:cf:bb:f9:5d:da:f1:f8:2f:08:fe:40:18:
2e:80:75:93:17:ab:b4:0c:ad:55:b9:34:de:fb:4c:
43:d4:e3:98:66:fd:d6:39:5d:a6:43:76:1f:4a:56:
c9:7e:3f:4f:55:20:2a:8d:46:c1:50:2b:f0:c8:cd:
aa:c8:2a:6a:24:af:4e:67:1f:ac:6a:92:94:b0:5c:
b3:6b:5b:ae:06:ae:b1:a6:ff:f3:13:4d:ac:ba:d4:
9c:13:03:87:bc:eb:fa:a7:e3:f9:f7:af:64:dd:fc:
68:6d:6b:16:bb:cf:76:b6:fc:6f:3b:49:62:16:2d:
4a:1b:16:69:5b:01:79:c8:ab:8d:43:87:53:12:3a:
c3:74:44:15:b8:e3:21:53:39:4a:7f:18:20:5c:a6:
72:d0:b2:88:06:70:b7:97:98:fc:fa:ea:38:42:1f:
a2:b1:82:df:ea:95:ce:14:7a:13:3e:76:c7:54:dd:
f8:f1:80:73:23:1a:34:cf:c6:8f:1c:b9:f0:b5:ea:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:32:4C:BC:13:3F:CC:9F:3A:C7:94:EA:22:F3:D5:AA:A1:31:45
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e0:20:19:04:e6:29:d7:0e:2f:4e:dc:94:c6:61:79:4e:a1:
83:52:75:92:86:3f:c5:bf:02:91:70:bf:28:75:bb:82:b2:23:
29:e3:ed:27:b9:f3:c0:85:e8:48:02:6b:75:3e:b6:04:08:6e:
59:8c:52:b5:be:61:64:a1:a1:0c:37:94:bc:87:50:bd:71:ab:
45:a1:17:bf:93:37:79:af:d5:45:5f:5b:88:9f:88:c8:ac:f3:
59:78:2e:9e:28:4a:84:46:bc:7b:94:cf:b1:50:5b:bf:57:98:
53:33:66:d0:48:d8:cf:25:7c:53:96:6d:ef:8b:f4:75:ac:be:
7a:23:c8:1e:86:f5:01:4e:eb:f1:41:90:52:7c:db:b0:08:aa:
18:81:3d:ee:d3:cc:3c:ad:16:dd:86:c8:2f:1b:7c:98:22:64:
f5:4e:de:5a:d0:a3:09:3b:26:98:11:b7:42:13:d5:57:34:9a:
ae:b1:73:84:b1:62:b9:a4:b9:2c:5e:de:36:3d:1c:53:d5:e1:
a5:50:2d:9e:05:74:44:ea:d0:d0:c6:42:82:82:96:44:ac:ea:
a9:98:1b:63:10:f5:56:4b:e5:38:70:6f:14:5d:71:22:0d:35:
83:f7:98:50:5b:6c:92:69:fa:af:c9:46:da:2c:8b:f1:34:75:
7b:8f:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:17 2025 by rpki-client